Lead DLP & Data Protection Architect

001 The Northern Trust Company; Chicago (IL); On-site; USD 137,000 - 234,000; Full time

Benefits offered by this job

401k and pension

Medical, dental, vision

Paid time off

Parental leave

Life & disability insurance

Equity component

Job summary

Northern Trust seeks a Principal Cyber Security Engineer to lead data protection engineering, DLP controls, and encryption protection across the enterprise. You will drive technical strategy, governance, and cross-functional alignment with Security, Compliance, Privacy, and Risk teams.

Responsibilities include migrating from legacy DLP to Microsoft Purview, redesigning Zscaler policies, implementing DAM, and securing data across on‑premises and cloud environments.

Qualifications

• Strong hands-on experience with Zscaler and Microsoft Purview DLP.
• Deep knowledge of Data Loss Prevention, data classification, information protection and encryption.
• Experience with Azure security capabilities (AIP/MIP, Defender for Cloud Apps).
• Strong understanding of network security concepts (proxies, firewalls, traffic analysis).
• Experience designing, deploying, troubleshooting, and operating security controls in complex environments.

Responsibilities

• Own the technical vision and control strategy for DLP and encryption data protection.
• Lead secure enablement and control oversight for DLP engineering and external data transfer controls.
• Drive automation of exception handling and governance workflows.
• Redesign and optimize Zscaler data protection policies.
• Provide direction for DAM initiatives and the Symantec exit strategy.
• Lead migration from Symantec DLP to Microsoft Purview to modernize protection.

Skills

Zscaler DLP

Microsoft Purview DLP

Data Loss Prevention

Azure security

AIP/MIP

Network security

Security controls

Database Activity Monitoring

Stakeholder management

Independent contributor

Job description

Northern Trust seeks a Principal Cyber Security Engineer to lead data protection engineering, DLP controls, and encryption protection across the enterprise. You will drive technical strategy, governance, and cross-functional alignment with Security, Compliance, Privacy, and Risk teams.

Responsibilities include migrating from legacy DLP to Microsoft Purview, redesigning Zscaler policies, implementing DAM, and securing data across on‑premises and cloud environments.